Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/450ZJIE4WE-56GUbhYvEh70Q6nA.roa
File: 450ZJIE4WE-56GUbhYvEh70Q6nA.roa (raw, json)
Hash identifier: iN+iEfSAyRLnUPBVeGp+xEvhggwfVvdVX6zOWJrG4ZQ=
Subject key identifier: E3:9D:19:24:81:38:58:4F:B9:E8:65:1B:85:8B:C4:87:BD:10:EA:70
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FFB61FB35861EBF7F1B7CED7CEF69
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/450ZJIE4WE-56GUbhYvEh70Q6nA.roa
Signing time: Sun 01 Jan 2023 21:14:53 +0000
ROA not before: Sun 01 Jan 2023 21:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209584
IP address blocks: 2a0e:aa07:e04c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fb:61:fb:35:86:1e:bf:7f:1b:7c:ed:7c:ef:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e39d19248138584fb9e8651b858bc487bd10ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:11:f6:8c:5d:6a:c7:bf:8d:da:72:48:c0:
8a:59:67:bc:15:ee:cb:bb:af:3b:25:d4:0f:40:ad:
30:e0:a5:e0:ac:a1:f4:24:56:10:1e:52:f8:23:5d:
12:50:3e:19:36:e8:89:0c:8f:ec:32:01:6f:17:d2:
20:60:13:14:da:17:5d:d2:b1:af:46:30:c8:2b:53:
fb:bc:2a:3c:d0:6a:d7:55:3c:18:02:ad:0c:7e:ac:
bf:70:28:1f:21:db:0b:e5:4b:da:93:15:5a:3c:7f:
d7:4b:b6:20:f6:05:52:71:35:4d:9a:66:33:64:cc:
e5:df:2e:ae:9c:03:bc:47:d2:fe:b6:bb:57:e0:03:
0a:80:cb:91:92:52:f0:80:8e:37:f6:19:2e:0d:51:
0d:e5:70:a9:5a:60:8e:0b:b0:05:6d:ea:35:1b:28:
8a:80:08:4a:b5:5d:2f:a5:bf:e5:ca:87:60:e6:8f:
94:5e:ea:ff:3c:14:85:c3:af:83:c9:99:f4:c7:29:
5f:26:bc:ae:75:ac:0e:13:ca:91:79:99:f5:eb:03:
31:05:a6:10:18:e6:4d:b0:9a:b9:3c:6d:67:55:49:
ae:4a:fa:c3:f5:c0:5a:67:e8:77:cd:67:25:b6:dd:
12:62:59:3e:b6:5c:53:2c:10:57:97:92:4d:a8:bc:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:19:24:81:38:58:4F:B9:E8:65:1B:85:8B:C4:87:BD:10:EA:70
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/450ZJIE4WE-56GUbhYvEh70Q6nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:5b:19:fe:ba:9b:01:be:43:42:ac:4a:c7:44:39:d3:78:88:
47:1a:6b:d5:3b:7d:b0:aa:db:1a:23:57:f7:c5:05:5b:88:6e:
18:4a:60:a3:4b:76:51:de:b0:77:a4:97:c6:dd:1b:bf:a8:78:
1c:5a:bb:5a:4e:b6:5d:6e:b0:9f:25:0c:7a:23:bb:74:6b:7e:
fe:51:76:61:dc:e2:c7:68:2d:0a:63:22:2e:97:fd:bf:98:85:
bd:da:aa:45:cb:f3:1c:5d:e1:32:37:c1:09:df:00:a9:e1:0b:
75:ac:eb:f8:1f:06:fb:b4:35:99:d8:4c:cf:01:b8:19:cf:5e:
cf:38:53:71:8a:60:27:f1:0c:7a:71:fa:74:1e:ab:a7:3a:f3:
64:02:31:7c:de:56:ce:1e:66:f6:0a:c3:f0:53:e2:98:b5:df:
0d:ec:1b:93:fa:88:6c:48:63:e7:ba:b6:a3:84:35:15:2d:b4:
8d:e0:f2:85:0b:04:01:83:0d:5a:10:d8:38:97:3d:7d:a0:be:
f9:7d:40:93:32:34:98:e4:ef:1a:41:67:71:34:ff:17:f2:6f:
76:40:a3:47:7e:3d:7e:ed:cd:c5:ea:f4:c6:ea:b7:e1:d5:0d:
e4:77:6a:5b:4a:61:83:9d:f6:b9:70:c2:4d:23:f5:df:04:ab:
f3:c0:ee:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL/th+zWGHr9/G3ztfO9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzlkMTkyNDgxMzg1ODRmYjllODY1MWI4NThiYzQ4N2JkMTBlYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf0R9oxdase/jdpySMCKWWe8Fe7L
u687JdQPQK0w4KXgrKH0JFYQHlL4I10SUD4ZNuiJDI/sMgFvF9IgYBMU2hdd0rGv
RjDIK1P7vCo80GrXVTwYAq0Mfqy/cCgfIdsL5UvakxVaPH/XS7Yg9gVScTVNmmYz
ZMzl3y6unAO8R9L+trtX4AMKgMuRklLwgI439hkuDVEN5XCpWmCOC7AFbeo1GyiK
gAhKtV0vpb/lyodg5o+UXur/PBSFw6+DyZn0xylfJryudawOE8qReZn16wMxBaYQ
GOZNsJq5PG1nVUmuSvrD9cBaZ+h3zWcltt0SYlk+tlxTLBBXl5JNqLxvmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOOdGSSBOFhPuehlG4WLxIe9EOpwMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvNDUwWkpJRTRXRS01NkdVYmhZdkVoNzBRNm5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BM
MA0GCSqGSIb3DQEBCwUAA4IBAQC8Wxn+upsBvkNCrErHRDnTeIhHGmvVO32wqtsa
I1f3xQVbiG4YSmCjS3ZR3rB3pJfG3Ru/qHgcWrtaTrZdbrCfJQx6I7t0a37+UXZh
3OLHaC0KYyIul/2/mIW92qpFy/McXeEyN8EJ3wCp4Qt1rOv4Hwb7tDWZ2EzPAbgZ
z17POFNximAn8Qx6cfp0HqunOvNkAjF83lbOHmb2CsPwU+KYtd8N7BuT+ohsSGPn
urajhDUVLbSN4PKFCwQBgw1aENg4lz19oL75fUCTMjSY5O8aQWdxNP8X8m92QKNH
fj1+7c3F6vTG6rfh1Q3kd2pbSmGDnfa5cMJNI/XfBKvzwO5x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org